This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer File: xhKt-r-RXfMxmJNYCM8N-XONyoc.cer (raw, json) Hash identifier: 7HKqit+ITXO/DM/rIH+dG6dluz0ASnKCn/GdMqLx7d8= Subject key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA75521A530CE84D96E0DA009679A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203063 IP: 185.145.0.0/22 IP: 2a0f:ce40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:75:52:1a:53:0c:e8:4d:96:e0:da:00:96:79:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c612adfabf915df33198935808cf0df9738dca87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:7d:32:0e:b9:a6:3c:00:49:a4:7c:e5:98: 1b:a6:18:53:45:32:16:46:f4:5a:46:eb:bf:cb:ef: a6:f7:fe:8b:41:7c:0b:4e:5a:9c:6d:58:65:e4:21: 65:b4:2a:f7:45:47:73:75:73:d6:6e:78:be:e7:6c: 2e:75:7b:47:c0:6b:25:cd:da:33:e6:ed:a8:c6:77: 6c:57:68:fc:c0:6d:8e:12:75:52:30:e5:8c:d5:b6: 99:b6:1d:73:73:ce:dc:b7:11:85:1c:0d:8e:b6:73: b4:ba:e9:84:b0:3f:6d:f3:ec:e1:a9:4d:bb:3a:57: 96:40:5f:0a:29:45:ad:86:6c:90:35:ba:d9:be:21: b1:b6:76:b2:0a:38:a3:13:08:3a:e3:10:42:95:77: 59:0e:5f:7f:51:c8:78:54:b3:32:bd:7c:1e:26:62: a5:24:bd:ce:91:a7:75:50:f2:79:ab:40:43:3e:b6: 1d:26:93:a5:0e:78:ab:4f:75:35:b5:48:30:40:58: 13:f4:66:d8:f3:a9:3e:51:4b:a0:d5:e5:05:ba:db: c5:13:2b:fd:b0:5b:35:fd:be:b1:a5:05:0b:ed:01: 3e:c1:83:3e:2f:cc:e1:4b:eb:5c:5f:be:99:ef:81: e6:d3:2d:7f:6a:61:34:29:f5:0f:15:23:02:4f:bc: 45:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.0.0/22 IPv6: 2a0f:ce40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203063 Signature Algorithm: sha256WithRSAEncryption 60:00:b8:f4:b7:b3:3e:bc:b9:f7:75:b9:92:6e:5c:f2:5e:55: 45:94:ed:ce:fd:63:74:bf:f2:7a:b1:fd:24:9d:fd:cd:83:bf: 7e:2d:cd:86:45:c5:97:ba:01:b5:e0:f6:54:96:bc:95:11:60: 8d:75:ea:87:e0:b7:05:66:af:06:56:a8:3b:fc:06:68:ba:f5: d2:77:3c:fe:ee:b5:ea:99:08:63:3f:3c:3d:fe:97:c8:c2:42: 3b:ce:68:c0:89:d5:a1:98:05:d7:ae:f4:68:68:9f:6a:ec:91: 3d:59:2e:4c:cd:48:32:90:0e:70:e7:e7:48:6e:8c:7f:81:f9: 05:49:6e:2d:21:8e:29:02:79:82:b7:e1:99:87:37:99:88:63: d7:dc:75:1f:df:11:49:61:b4:04:7f:1d:ef:af:b3:48:32:35: ec:ed:52:0e:de:8e:98:5c:e9:fd:20:e6:fb:13:5f:85:ea:a3: 8f:27:c3:45:74:9f:72:1c:b1:81:0b:dc:a1:d2:fb:82:14:5e: c2:a4:71:88:a4:3f:87:38:5c:c0:0c:f9:1b:a8:80:c9:bd:f1: 25:6c:d9:e8:18:77:23:22:26:a4:7e:53:c3:98:02:dc:03:99: a8:26:a0:58:e1:f8:99:c8:6d:f0:0f:a6:3e:8e:a7:fa:4e:17: 2a:05:e2:d6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ynVSGlMM6E2W4NoAlnmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjEyYWRmYWJmOTE1ZGYzMzE5ODkzNTgwOGNmMGRmOTczOGRjYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E99Mg65pjwASaR85ZgbphhTRTIW RvRaRuu/y++m9/6LQXwLTlqcbVhl5CFltCr3RUdzdXPWbni+52wudXtHwGslzdoz 5u2oxndsV2j8wG2OEnVSMOWM1baZth1zc87ctxGFHA2OtnO0uumEsD9t8+zhqU27 OleWQF8KKUWthmyQNbrZviGxtnayCjijEwg64xBClXdZDl9/Uch4VLMyvXweJmKl JL3Okad1UPJ5q0BDPrYdJpOlDnirT3U1tUgwQFgT9GbY86k+UUug1eUFutvFEyv9 sFs1/b6xpQUL7QE+wYM+L8zhS+tcX76Z74Hm0y1/amE0KfUPFSMCT7xFIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMYSrfq/kV3zMZiTWAjPDflzjcqHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzMwYWIx OC1kMzc5LTRhYzctYTkwOC04MWE0NmY0ZjZkNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMzBhYjE4 LWQzNzktNGFjNy1hOTA4LTgxYTQ2ZjRmNmQ1YS8xL3hoS3Qtci1SWGZNeG1KTllD TThOLVhPTnlvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZEAMA0EAgACMAcDBQAqD85AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZNzANBgkqhkiG9w0BAQsFAAOCAQEAYAC49LezPry5 93W5km5c8l5VRZTtzv1jdL/yerH9JJ39zYO/fi3NhkXFl7oBteD2VJa8lRFgjXXq h+C3BWavBlaoO/wGaLr10nc8/u616pkIYz88Pf6XyMJCO85owInVoZgF1670aGif auyRPVkuTM1IMpAOcOfnSG6Mf4H5BUluLSGOKQJ5grfhmYc3mYhj19x1H98RSWG0 BH8d76+zSDI17O1SDt6OmFzp/SDm+xNfheqjjyfDRXSfchyxgQvcodL7ghRewqRx iKQ/hzhcwAz5G6iAyb3xJWzZ6Bh3IyImpH5Tw5gC3AOZqCagWOH4mcht8A+mPo6n +k4XKgXi1g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:07 2026 by rpki-client